If a Resource Access Management (RAM) user no longer needs specific permissions or the RAM user leaves your organization, you can revoke the permissions from the RAM user. This topic describes how to revoke permissions from a RAM user.

Method 1: Revoke permissions from a RAM user on the Users page

  1. Log on to the RAM console by using your Alibaba Cloud account.
  2. In the left-side navigation pane, choose Identities > Users.
  3. On the Users page, click the username of a specific RAM user.
  4. On the page that appears, click the Permissions tab, find the policy that you want to detach from the RAM user, and then click Remove Permission in the Actions column.
  5. In the message that appears, click OK.

Method 2: Revoke permissions from a RAM user on the Grants page

  1. Log on to the RAM console by using your Alibaba Cloud account.
  2. In the left-side navigation pane, choose Permissions > Grants.
  3. On the Grants page, find the RAM user from which you want to revoke permissions and click Revoke Permission in the Actions column.
  4. Click OK.